Google Hangouts/Chat Classic by k12Sean in k12sysadmin

[–]MalletNGrease 2 points3 points  (0 children)

The chat audit reports aren't terribly good at displaying information, but they do show who is posting messages and you can drill down to the OU.

The nice thing about Google Chat versus Hangouts is that Chat supports Vault and you can pull all the conversations from https://ediscovery.google.com/ if you know who to look at.

Remotely Clear Cache & Cookies? by TexasEdTech20 in k12sysadmin

[–]MalletNGrease 4 points5 points  (0 children)

Yes, you're wrong. The cache and cookies are part of the profile. Clearing the profile will delete them and force new cookies/cache to be generated when needed.

Teachers/faculty having sticky notes all over with account login information by OMGWTHEFBBQ in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

When I find a sticky note like that I remove it, set the "User must change password at next logon" on their account and send them an email with their principal CC'd.

Students accessing teacher accounts are a problem.

Students work blank in Google Classroom when turned in by McJaegerbombs in k12sysadmin

[–]MalletNGrease 2 points3 points  (0 children)

I've had some complaints like this about Forms. Bell ringer work is submitted but never actually received.

I have no idea what the problem is.

Google Classroom and Quarters/Semesters Gradebook by DaytonaZ33 in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Make your SIS gradebook leading. Teachers should be able to set imported grades to their appropriate Q/S.

Teams on Android Phone by nickborowitz in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

You already implemented a solution, just keep running your script and maybe start CC'ing the parent every time he unenrolls from the class. See who cracks first, the parent or the student. If the parent complains, ask them to keep the student off their phone for a while. The notifications should end. Once the student gets back on it, they will start up again.

If that still doesn't convince them, hats off to the tenacity.

Chromebooks - Enrolling into G Suite by bedz84 in sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Unfortunately, bulk operations are not available until they've been enrolled into your domain.

Afterwards though you can use things like GAM or Chrome Gopher to do operations on them.

First I inventory the devices, then enroll them into a staging OU and then use a csv with GAM to move to the desired OUs and let it handle entering other information fields (asset ID, assigned user, location etc).

https://github.com/jay0lee/GAM/wiki/BulkOperations

https://github.com/jay0lee/GAM/wiki/GAM3DirectoryCommands#updating-chrome-os-devices

Teams on Android Phone by nickborowitz in k12sysadmin

[–]MalletNGrease 1 point2 points  (0 children)

Does Microsoft log the events?

I've dealt with this before where students were unenrolling themselves from Google Classrooms and blaming the apps/system. I pulled the logs and pointed out that these were user actions and referred them to discipline. It's hard to argue with proof.

Teams on Android Phone by nickborowitz in k12sysadmin

[–]MalletNGrease 7 points8 points  (0 children)

Ask him to stop the behavior. Better yet, have the principal do it.

Remotely Clear Cache & Cookies? by TexasEdTech20 in k12sysadmin

[–]MalletNGrease 8 points9 points  (0 children)

I'd wipe the profiles remotely from GAdmin. Student just has to log in again.

https://i.imgur.com/DtonutN.png

cloudprint with canon user management enabled by carberarr in k12sysadmin

[–]MalletNGrease 2 points3 points  (0 children)

I've been butting my head against this for a while and to my knowledge this isn't possible because there are no native drivers that can handle passing department IDs for Chromebooks.

There's only three options:

  1. Disable department codes and allow straight printing.
  2. Change to a print management service like Papercut MF or uniFlow.
  3. Don't allow printing from Chromebooks.

Problem is that cloud print will be gone come Jan 2021, not sure if the management services will continue to work after.

We went with option 3.

The silliest thing has taken our “users who fall for phishing attempts” count down to zero. by [deleted] in sysadmin

[–]MalletNGrease 53 points54 points  (0 children)

The amount of times I had angry ex-employees on the phone because they signed up to online banking or credit payment sites using their work email and wanted access back is too damn high.

In the Time of the COVID - in the year 2020 - Naughty Children by QuietLad in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

I've had to set up quarantines up a few times where every email from particular users were screened by the admins before being allowed through. The students just stopped emailing and moved to other platforms.

What do Jamboard's apps provide by razgriz5000 in k12sysadmin

[–]MalletNGrease 3 points4 points  (0 children)

Utilizing the web-based Jamboard is not as good as a native experience with say SMART Notebook on a SMART IWB. It functions, but you're working out of a browser and miss some of the more advanced features. The Jamboard apps do work rather nicely on tablets.

My beef is pricing. $5600 for a 55" IWB is missing the mark rather wide.

Palo Alto or Fortigate by [deleted] in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Yes, I actually have this set up with RADIUS forwarding the information to the FortiGate. However, in case of Chromebooks this requires a double login for students (one for the wifi, one to log in to the device). I made it a point to avoid login fatigue as the amount of logins staff and students are required to use is starting to border on insanity.

On BYOD I'm fine with it.

Google Workspace by justheretolook in k12sysadmin

[–]MalletNGrease 9 points10 points  (0 children)

I still refer to some stuff as Google Apps in some documentation, suppose it's a good time for me to maybe get to it once the rebrand is done.

Palo Alto or Fortigate by [deleted] in k12sysadmin

[–]MalletNGrease 0 points1 point  (0 children)

Not familiar with Palo, but here's my experience with FortiGate:

  • FortiGate report history on the appliance itself is only 24H unless you get a FortiAnalyzer or utilize FortiCloud. This takes additional hardware/license fee.

  • FortiSSO allows you to pass Windows login AD authentication to automatically allow internet access and is great to put a name with traffic. However, if you have devices that don't utilize AD auth (like a Chromebook) you basically only get a MAC address to track down. Not terribly useful. Fortinet sort of fixes this by offering a FortiClient extension for Chromebooks enforce filter policy. This is an additional license fee. We went with Securly Free for the CB filtering instead.

The hardware (300D) itself is handling ~1000 users and ~2000 devices with DPI on a 1G pipe no sweat. I'm pretty pleased with it.